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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 




Listing of Claims: 

1 . (Original) A method of providing a desired set of service policies to each of a 
lurality of subscribers, said method comprising: 

identifying a plurality of propessing rules which provide a set of service poUcies desired 
by each subscriber; 

configuring an intemet servic^ node with said processing rules corresponding to each of 
said subscribers; 

receiving data in said intemet s^ice node; 

determining in said intemet service node a specific subscriber to whom said received data 
relates to; and 

applying in said intemet service no^e said plurality of processing rules related to said 
determined specific subscriber, wherein saimapplying is performed after said determining. 



2. (Original) The method of claimU, wherein said intemet service node is provided 
as an edge device of an access network such the^ervice poUcies can be controlled firom the edge 
of said access network. 

3. (Original) The method of claim 2, wl^erein said intemet service node comprises 
an edge router. 



4. (Original) The method of claim 1, wherem said intemet service node comprises a 
pluraUty of processors, said determining and applying togettier comprises: 

assigning each of said subscribers to a processor group, wherein each processor group is 
configured with the processing rules corresponding to assigned subscribers; and 

forwarding data related to each subscriber to a corresponding processor group after said 
determining of specific subscriber. 
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5. (Original) The meth(/d of claim 4, wherein each processor group comprises a 
plurality of processors. 

6. (Original) The methooi of claim 4, wherein data related to subscribers assigned to 
said processor group is assigned in a raund-robin fashion among said plurality of processors. 

7. (Original) The method oif claim 4, wherein end systems of said plurality of 
subscribers generate data using intemet Protocol (IP). 

8. (Original) The method of claim 7, wherein said data comprises ATM cells. 

9. (Original) The method of claim 8, wherein said determining comprises 
examining data contained in said ATM cellk said determination of specific subscriber being 
based on the results of said examination and a port on which said ATM cells are received, 
wherein said port is comprised in said internet service node. 



10. (Original) The method of claim 9, wherein said applying comprising: 
deciding in said port the specific processor group to which said data is to be forwarded, 

wherein said specific processor group is decide(\ based on said specific subscriber to whom said 
received data relates to; and 

modifying the header of said cells to indicate said determined processor group such that 
the cells can be forwarded to an appropriate processor group based on examination of cell 
header, wherein said appropriate processor group i\ configured with the processing rules relate to 
said specific subscriber. 

11. (Original) The method of claim 10, wWein said deciding is performed using a 
content addressable memory (CAM), said CAM contaming a plurality of locations, each of said 
plurality of locations having a mask, a search field and an outfield field, said CAM being 
designed to receive an input value and compare said inpmt value with data in said search field at 
bit positions specified by said mask for each of said plurality of locations, said CM being 
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designed to generate as output trie data stored in said output field if there is a match with the 
corresponding location. \ 

12. (Original) The method of claim 11, wherein the data stored in the output field of 
said CAM identifies an identifier oF a processor group either directly or indirectly, and wherein 
each entry of said mask and search field are implemented to store data identifying a subscriber 
such that said identifier can be detemiined using said data stored in said output field. 

13. (Original) The method of claim 12, wherein a portion of the header of said ATM 
cells is replaced with said identifier such that said ATM cells can be assigned to a processor 
group designed to process data relatedtto said subscriber by examining said header. 

14. (Original) The method of claim 13, wherein said identifier is stored in a virtual 
path identifier (VPI) or virtual channel identifier (VCI) field of said header. 

15. (Original) The method of clVim 12, wherein bytes 1, 7, 8, 10, and 13-20 of an IP 
header are provided as said input to said CAM. 

16. (Original) The method of claim\l3, wherein a switch fabric forwards said data to 
said processor group based on an examination onsaid header of said ATM cells. 

17. (Original) Themethodof claim 13, Wther comprising: 

storing a mapping of virtual path identifier/viWal channel identifier (VP WCI) and port 
number to a connection identifier in a virtual channel WC) table, wherein each entry of said VC 
table fiirther indicates whether the VPWCI of a received cell needs to be replaced, and 

accessing an entry in said VC table correspondinato a received cell comprised in said 
received data, \ 

wherein said header of said received cell is modified\pnly if the data in said entry 
indicates that the VPLVCI field is to be replaced. \ 

18. (Original) The method of claim 17, further compmsing: 
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setting the VCI cells forming said received data to said connection identifier; 

generating a processor identifier or a processor group identifier using said output of said 
CAM; and \ 

setting the VPI of said sequence of cells to said processor identifier or said processor 
group identifier; \ 

wherein said switch fabric uses said VPI to forward said sequence of cells to one of said 
processors. \ 

19. (Original) The method of claim 12, further comprising setting said mask of a 
location to examine at least some of the bit positions corresponding to an IP address, and said 
search field of said location to a plurality of IP addresses in combination with said mask, wherein 
at least some of said IP addresses are associated with said subscriber. 

20. (Original) The method of claim 19, wherein each of said IP addresses comprises 
an IP source address. \ 

21. (Original) The method of clarni 19, wherein each of said IP addresses comprises 
an IP destination address. \ 

22. (Original) The method of claim\l9, further comprises: 

maintaining an IP table mapping each onsaid plurality of IP addresses to a processor 
identifier or a processor group identifier; and \ 

using bits in the masked positions of the IR address of said IP packet and said output of 
said CAM to retrieve said processor identifier or said processor group identifier, 

wherein said sequence of cells are assigned to a processor identified by said processor 
identifier or said processor group identifier by said processor group identifier. 

23. (Original) The method of claim 12, wheredn said search field does not contain 
sufficient number of bits to store data identifying said substriber, said method further 
comprising: \ 
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Storing in a plurality of entries of said CAM data identifying said subscriber, wherein the 
output of said plurality of entries is examined in determining said processor identifier or 
processor group identifier. \ 

24. (Original) The method of claim 23, wherein the output of one said plurality of 
entries is used as an input to anothi^ one of said plurality of entries of said CAM, wherein the 
output of said another of said plurality of entries identifies said processor identifier or processor 
group identifier. 

25. (Original) The method^^f claim 23, wherein received data related to said 
subscriber is received using an L2TP timnel. 

\ 

26. (Original) The method oficlaim 25, fiirther comprises: 

providing bytes 1, 7, 8, 10, 13-15,Wd 17-20 of the IP packet contained in a first cell of 
said received data as a first input; and 

providing bytes 23, 24, and 27-37 of\he EP packet contained in said first cell as a second 

input. 

27. (Original) A method of providing a desired set of service policies to each of a 
plurality of subscribers, said method comprising! 

(a) providing an internet service nodeVlSN) as an edge router; 

(b) specifying a desired set of service pbUcies for each of said plurality of 
subscribers; \ 

(c) translating each of said desired servicapolicies into processing rules, wherein 
each processing rule comprises a classifier and an associated action, wherein said classifier 
identifies data flows to which said associated action is to^e applied; 

(d) configuring said ISN with said processing mles; 

(e) receiving a plurality of bit groups fi-om a subscriber comprised in said plurality of 
subscribers; 
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(f) generating a plurality pf packets from data contained in said plurality of bit 
groups, wherein each of said plurality of packets can be associated with a data flow generated by 
an application of said subscriber; 

(g) determining a data flowVo which each of said plurality of packets relates to; and 

(h) applying said actions asspciated with classifiers matching said data flow 
determined in (g), 

whereby each of said plurality ofkubscribers are provided said corresponding desired set 
of service policies. 

28. (Original) The method of olaim 27, wherein end systems of said plurality of 
subscribers generate data using internet prcjtocol (IP) and (f) comprises generating a plurality of 
DP packets. 

29. (Original) The method of claim 28, wherein said bit groups comprise ATM cells, 
and wherein said plurahty of packets are generated from said ATM cells. 

30. The method of claim 28, further comprising maintain a state for one of said 
plurality of service policies, wherein said statejenables multiple data flows to be processed to 
meet the service. 

3 1 . (Original) The method of claim i8, fiirther comprising maintaining a state for 
each of said data flows, wherein the processing n^es to be applied to packets of each flow is 
maintained in said state. 

32. (Original) The method of claim 28, flirther comprising: 

(i) monitoring control data flow of an application to determine the port number of a 
new data flow by an application; and 

(j) generating a new processing rule using tAe determined port number. 

33. (Original) The method of claim 27, furthencomprising: 
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(k) providing a pluralitjlk of processor groups, with each processor group containing a 
pluraUty of processors; and \ 

(1) assigning each of saia packets to one of said plurality of processor groups, 
wherein one of said plurality of processors in said assigned groups processes the assigned 
packets. \ 

34. (Original) The method ©f claim 33, wherein all packets related to a subscriber are 
assigned to a single processor group. \ 

35. (Original) The method onclaim 34, further comprising assigning packets to 
individual processors in a roimd-robin fashion. 

36. (Withdrawn) A method of ^signing an intemet protocol (IP) packet related to a 
subscriber to a processor in an intemet service node (ISN), said ISN containing a plurality of 
processors, wherein said processor is capable of processing said IP packet to provide service 
policies desired for said subscriber, said method comprising: 

(a) configuring a location of a content addressable memory (CAM), said CAM 
containing a plurality of locations including sain location, each of said plurality of locations 
having a mask, a search field and an outfield field, said CAM being designed to receive an input 
value and compare said input value with data in said search field at bit positions specified by said 
mask for each of said plurality of locations, said CAM being designed to generate as output the 
data stored in said output field if there is a match with the corresponding location, said search 
field and said mask of said location being set to data identifying one or more processors suitable 
for processing data related to said subscriber; \ 

(b) receiving said IP packet in the form of a sequence of cells including a first cell 
containing the header data of said IP packet; \ 

(c) providing data in said first cell as said inout value to said CAM; 

(d) receiving as an output of said CAM the da\a stored in said output field of a 
location if the corresponding search field matches said input value at the bit positions specified 
by the corresponding mask; and \ 



Docket No: 003239.P098 



Page 8 of 22 



WWS/crr 



Appl. No. 09/600,054 ^ 
Amdt. Dated 1 1/06/2003 
Reply to Office action of Augxist 62003 

(e) assigning said sequence of cells to said one or more processors identified by said 
output received in (d), 

whereby said IP packet isWssigned to said one or more processors suitable for processing 
said BP packet if the data in said first cell matches data stored in said location at bit positions 
specified by said mask of said locaiion. 

37. (Withdrawn) The method of claim 36, wherein said data provided in (c) 
comprises bytes 1, 7, 8, 10, and 13-20 of said IP header. 

38. (Withdrawn) The method of claim 36, wherein said output of (d) identifies a 
processor group suitable for processin^g said IP packet and said processor group includes said one 
or more processors assigned to in (e). 

39. (Withdrawn) The methou of claim 36, wherein a switch fabric forwards each cell 
to one of said one or more processors according to the cell header, and (e) comprises modifying 
the cell header of said sequence cells. 

40. (Original) The method of cl^im 4, fiirther comprising: 

(f) storing a mapping of virtual path identifier/virtual channel identifier (VPWCI) 
and port number to a connection identifier in\a virtual channel (VC) table, wherein each entry of 
said VC table fiu^ther indicates whether the VPWCI of a received cell needs to be replaced; 

(g) accessing an entry in said VC table corresponding to said first cell; and 

(h) performing (c) - (e) only if said retrieved entry indicates that the VPWCI of said 
first cell needs to be replaced. 

41. (Original) The method of claim 5, wiierein (e) comprises: 

(i) setting the VCI of said sequence of cells to said connection identifier; 
(j) generating a processor identifier or a proipessor group identifier using said output 

of (d); and 

(k) setting the VPI of said sequence of cells to \aid processor identifier or said 
processor group identifier, 
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wherein said switch fabrfc uses said VPI to forward said sequence of cells to one of said 
processors. \ 

42. (Withdrawn) The method of claim 36, wherein (a) comprises a setting said mask 
of said location to examine at least some of the bit positions corresponding to an IP address, and 
said search field of said location to a plurality of IP addresses in combination with said mask, 
wherein at least some of said IP addresses are associated with said subscriber. 

43. (Withdrawn) The memod of claim 42, wherein each of said IP addresses 
comprises in IP destination address, i 

44. (Withdrawn) The method of claim 43, wherein each of said IP addresses 
comprises an IP destination address. \ 

45. (Withdrawn) The method of claim 42, said method further comprises: 

(1) maintaining an IP table mapping each of said plurality of IP addresses to a 
processor identifier or a processor group identifier; and 

(m) using bits in the masked positions of the IP address of said IP packet and said 
output of (e) to retrieve said processor identifier or said processor group identifier, wherein said 
processor group comprises a plurality of processors, 

46. (Withdrawn) The method of ctaim 36, wherein said search field does not contain 
sufficient number of bits to store data identifying said subscriber, said method further 
comprising: \ 

(n) storing said data and corresponding masks identifying said subscriber in more 
than one of said locations; \ 

(o) providing different portions of said data as different inputs to said CAM, wherein 
said input of (c) is provided last; and \ 

(p) using said output of (d) to identify said processor or processor group for 
processing only if matches exist for all of said differeik inputs. 
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47. (Withdrawn) The method of claim 46, wherein subscriber data is received using 
an L2TP tunnel. 

48. (Withdrawn) The Aiethod of claim 46, wherein (n) comprises: 
(q) providing bytes 1, A 8, 10, 13-15, and 17-20 of the IP packet contained in said 

first cell as a first input; and 

(r) providing bytes 23, ^4, and 27-37 of the IP packet contained in said first cell as a 
second input. 

49. (Withdrawn) A method of assigning a cell to one of a plurality of processors 
comprised in an internet service nodeuISN), said method comprising: 

(a) configuring a content addressable memory (CAM) comprising a plurality of 
locations, each of said plurahty of locaiions having a mask, a search field and an outfield field, 
said CAM being designed to receive anunput value and compare said input value with data in 
said search field at bit positions specified by said mask for each of said plurality of locations, 

said search field, said mask and said output field of a first location comprised in said 

plurality of locations being configured wik first a first search value, a first mask value and a first 

\ 

output value respectively, said search field,\ said mask and said output field of a second location 
comprised in said plurality of locations beinW configured with a second search value, a second 
mask and a second output value respectively! 

wherein said first search value, said fikt mask value and said first output value are not 
equal to said second search value, said second mask and said second output value respectively 
and wherein said first output value and said secdnd output value contain data identifying one or 
more processors comprised in said plurality of pr\jcessors; 

(b) receiving said cell in said ISN; 

(c) providing data in said first cell as sai^ input value to said CAM; 

(d) receiving as an output of said CAM the data stored in said output field of a 
location if the corresponding search field matches said\nput value at the bit positions specified 
by the corresponding mask; and 

(e) assigning said cell to a processor identifiedNby said output received in (d). 
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50. (Withdrawn) The rfiethod of claim 49, wherein said cells is a header cell of a 
sequence of cells forming a packet! said method further comprising assigning all of said 
sequence of cells to said processor.! 

5 1 . (Withdrawn)' An internet service node (ISN) for providing a desired set of service 



policies desired by each of a plurality 



subset of said plurality of processors 
processing rules which provide a set 



of subscribers, said ISN comprising: 



a plurality of processors, wherein each of said plurality of subscribers is assigned to a 



wherein said subset of said processor is configured with 
of service policies desired by said corresponding subscriber; 



a port coupled to receive data related to one of said plurality of subscribers, said port 
determining a subset of processors which are designed to process data related to said one of said 
plurality of subscribers; and 1 

a switch fabric coupled to said plurality of processors and said port, wherein said switch 
fabric receives said data from said port and forwards said data to said subset of processors 
according to the determination of said p^rt. 

52. (Withdrawn) The ISN of^laim 5 1 , wherein each of said set of said plurality of 
processors is provided as a processor group in a packet service card, wherein said packet service 
card contains a plurality of processor groups, and wherein said ISN contains a plurality of packet 
service cards. 

53. (Withdrawn) The ISN of claiVn 5 1 , wherein said port receives said data as a 
sequence of ATM cells. 

54. (Withdravm) The ISN of claim ^53, wherein said port determines an identifier of 
said subset of processors and sends said identifier to said switch fabric, wherein said switch 
fabric assigns said ATM cells to said subset of processors based on said identifier. 

55. (Withdrawn) The ISN of claim 54, Wherein said port modifies a header of each of 
said ATM cells to include said identifier in said header such that said switch fabric can forward 
said ATM cells to said subset of processors by examining said header. 
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56. (Withdrawn) The iSN of claim 55, wherein said port comprises: 
a framer to receive said date related to said one of said plurality of subscribers; 

a content addressable memory (CAM) containing a plurality of locations, each of said 
plurality of locations having a mask,\ a search field and an outfield field, said CAM being 
designed to receive an input value ana compare said input value with data in said search field at 
bit positions specified by said mask for each of said plurality of locations, said CAM being 
designed to generate as output the data stored in said output field if there is a match with the 
corresponding locations, wherein the ckta stored in the output field of said CAM identifies an 
identifier of a processor group either directly or indirectly, and wherein each entry of said mask 
and search field are implemented to store data identifying a subscriber such that said identifier 
can be determined using said data stored in said output field; and 

an assignment logic coupled to said CAM and said fi-amer, said assignment logic 
determining said identifier by providing t\^e received data as an input to said CAM, said 
assignment logic including said identifier in said header. 

57. (Withdrawn) The ISN of claim 56, wherein said identifier is stored in a virtual 
path identifier (VPI) or virtual channel identifier (VCI) field of said header. 

58. (Withdrawn) The ISN of claim 57, wherein said sequence of cells contain an 
Intemet Protocol (IP) packet, and said assignn\ent logic provides bytes 1, 7, 8, 10, and 13-20 of 
an IP header as said input to said CAM. 

59. (Withdrawn) The ISN of claim sV, fiirther comprising: 
a virtual channel table storing a mapping of virtual path identifier/virtual channel 

identifier (VPWCI) and port number to a connection identifier, wherein each entry of said VC 
table further indicates whether the VPFVCI of a redeived cell needs to be replaced, wherein said 
assignment logic accesses an entry in said VC table corresponding to a received cell comprised 
in said received data, and modifies said header only if^ata in said entry indicates that the 
VPWCI field is to be replaced. 
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60. (Withdrawn) The tISN of claim 59, wherein said assignment logic sets the VCI of 
cells forming said received data to^ said connection identifier and said VPI of said cells to said 
identifier. 

61. (Withdrawn) The of claim 56, wherein said search field does not contain 
sufficient number of bits to store dat^ identifying said subscriber, and wherein said CAM is 
designed to store in a plurality of entries data identifying said subscriber, wherein said 
assignment logic examines the outputW said plurality of entries in determining said identifier. 

62. (Withdrawn) The ISN of claim 61, wherein said assignment logic uses the output 
of one of said plurality of entries as an input to another one of said plurality of entries, wherein 
the output of said another of said plurality of entries identifies said processor identifier or 
processor group identifier, 

63. (Withdrawn) The ISN of cl^m 61, wherein data related to said subscriber is 
received using an L2TP tunnel. 

64. (Withdrawn) The ISN of claim\62, wherein said assignment logic is designed to 
provide bytes 1, 7, 8, 10, 13-15, and 17-20 of the IP packet contained in a first cell of said 
received data as a first input, and bytes 23, 24, and 27-37 of the IP packet contained in said first 
cell as a second input. 

65. (Withdrawn) An intemet service node (ISN) for providing a desired set of service 
policies desired by each of a plurality of subscribers, said ISN comprising: 

an access port to receive a plurality of bit groiips related to a subscriber comprised in said 
plurality of subscribers; \ 

a switch fabric coupled to said access port, said switch fabric to receive said plurality of 
bit groups and generating a plurality of packets, wherein said plurality of packets contain the data 
generated fi:'om applications related to said subscriber, wherein each of said plurality of packets 
contains sufficient data to be identified with a data flow ge^nerated by said applications related to 
said subscriber; 
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a packet service card to recfeive said plurality of packets, said packet service card 
processing each of said packets acc^ording to a plurality of processing rules related to said 
subscriber, 

wherein each of said pluralitk^ of processing rules contain a classifier and an associated 
action, said classifier identifying at Ipast one data flow to which said associated action is to be 
applied, 

a trunk port coupled to said switch fabric, said trunk port for transmitting any of said 
plurality of packets desired to be transmitted, 

wherein providing a corresponding plurality of processing rules to each of said plurality 
of subscribers enables said ISN to proyide said desired set of service for each of said plurality of 
subscribers. 

66. (Withdrawn) The ISN of claim 65, wherein said plurality of packets comprise 
Intemet Protocol (IP) packets. 

67. (Withdrawn) The ISN of claim 66, wherein each of said data flows is identified 
by source IP address, destination IP addreis, protocol type, source port number and destination 
port number. 

68. (Withdrawn) The ISN of claim 67, further comprising an interface for enabling a 
manager to provide said desired set of service policies, and wherein said ISN is designed to 
generate at least some of the said processing rules based on said desired set of service policies 
provided by said manager. 

69. (Withdrawn) The ISN of claim 68, wherein said packet service card is designed 
to monitor control data flows of an application t^ determine the parameters values identifying 

70. (Withdrawn) The ISN of claim 65, wherein said packet service card comprises a 
plurality of processors, wherein said plurality of proc\ssors enable said ISN to process said 
plurality of packets quickly. 
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71 . (Withdrawn) The ISN of claim 70, wherein said plurality of processors are 
provided in a separate physical unit from said access port to said trunk port, wherein the 
separation enables the number of processors to be changed independent of the number of access 
ports and trunk ports. \ 

72. (Withdrawn) The iSN of claim 70, wherein a state is maintained for each of said 
processing flows, wherein said stat^ indicates the processing rules to be applied to each of said 
plurality of packets related to the corresponding flow. 



73. (Withdrawn) The ISN of claim 65, wherein said bit groups comprise ATM cells 
such that said switch fabric is designed to convert to generate each of said packets from the 
payload in a plurality of ATM cells. \ 



74. (Withdrawn) The ISN o^claim 65, wherein said bit groups comprise contain 
sufficient data to be identified with a data flow generated by said applications related to said 
subscriber such that each of said packets is generated from one of said bit groups. 

75. (Withdrawn) The ISN of claim 65, further comprising a random access memory 
(RAM), wherein said processor interface stores said plurality of bit groups in said RAM. 

76. (Withdrawn) An intemet ser\^ce node (ISN) for processing a packet comprising a 
sequence of cells including a header cell, saiduSN comprising: 

a plurality of processors; \ 

a content addressable memory (CAM) containing a plurality of locations, each of said 
plurality of locations having a mask, a search fiela and an outfield field, said CAM being 
designed to receive an input value and compare saik input value with data in said search field at 
bit positions specified by said mask for each of said plurality of locations, said CAM being 
designed to generate as output the data stored in said oitout field if there is a match with the 
corresponding location, said search field and said mask oV said location being configured with 
data identifying packets suitable for processing by one or more of said plurality of processors, 
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said output field being configured with data identifying one or more processors suitable for 
processing a corresponding pacWt; and 

an assignment logic to receive said header cell and providing data fi-om said header cell 
as said input value of said CAM, whereby the output of said CAM identifies one or more 
processors suitable for processing said packet, said assignment logic assigning all of said 
sequence of cells to said one or more processors according to said output of said CAM, 

wherein said packet is processed by a suitable processor. 

77. (Withdrawn) The ISMof claim 76, wherein said assignment logic is designed to 
assign said sequence of cells by setting at least a portion of the cell header of each cell to said 
identifier, said ISN fiulher comprising\a switch fabric which forwards said sequence of cells to 
processors according to cell headers. 

78. (Withdrawn) The ISN of claim 77, wherein said ISN receives packets related to a 
plurality of subscribers, and wherein the mask and search fields of each location are configured 
to identify a subscriber, and wherein the corresponding output field is designed to identify one or 
more of said processors suitable for processing packets related to the subscriber identified by the 
corresponding mask field and search field. 

79. (Withdrawn) The ISN of claib 78, wherein said packet comprises an IP packet. 

80. (Withdrawn) The ISN of claim\79, wherein said mask of a location is configured 
for examination of at least some of the bit positions corresponding to an IP address, and said 
search field of said location to a plurality of IP addresses in combination with said mask, wherein 
at least some of said IP addresses are associated with said subscriber. 

81. (Withdrawn) The ISN of claim 80, w^herein each of said IP addresses comprises 
an IP source address. 

82. (Withdrawn) The ISN of claim 80, wherfein each of said IP addresses comprises 
an IP destination address. 
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83. (Withdrawn) Tttie ISN of claim 80, further comprising a memory for storing an IP 
table mapping each of said pliAality of IP addresses to a processor identifier or a processor 
identifier or a processor group identifier, wherein said assignment logic is designed to use bits in 
the masked positions of the IP address and the output of said CAM to retrieve said identifier, 
wherein said sequence of cells are assigned to one or more processors according to said 
identifier. 



84. (Withdrawn) The ISN of claim 79, wherein said search field does not contain 
sufficient number of bits to store data identifying each subscriber, and wherein said CAM is 
configured to store said data and corresponding masks identifying said subscriber in more than 
one of said locations, and wherein said assignment logic is designed to send different portions of 
said data as different inputs to said CAM, wherein said assignment logic determines that said 
packet relates to a subscriber only upon a raatch for all of said inputs. 

85. (Withdrawn) The ISN of claim 84, wherein said assignment logic is designed to 
provide bytes 1, 7, 8, 10, 13-15, and 17-20 of me IP packet contained in said header cell as a first 
input, and bytes 23, 24, 27-37 of the EP packet contained in said header cell as a second input. 

86. (Withdrawn) The ISN of claim 7& fiirther comprising a service manager which 



configures said CAM to cause packets related to said subscriber to said one or more of said 
processors, wherein said service manager further configures said one or more processors with 
processing rules suitable for processing said packets related to said subscriber. 

87. (Withdrawn) The ISN of claim 86, further comprising an access port, wherein 
said access port contains said CAM and said assignmenUogic. 

88. (Withdrawn) The ISN of claim 86, further \jomprising a trunk port, wherein said 
trunk port contains said CAM and said assignment logic. 

89. (Original) An internet service node (ISN) provfding a desired set of service 
policies to each of a plurality of subscribers, said ISN comprising: 
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identifying means for i(^entifying a plurality of processing rules which provide a set of 
service policies desired by each subscriber; 

configuration means for configuring an internet service node with said processing rules 
corresponding to each of said subscribers; 

receiving means for receiving data in said internet service node; 

determination means for determining in said internet service node a specific subscriber to 
whom said received data relates to; and 

applying means for applying in said internet service node said pluraUty of processing 
rules related to said determine specific subscriber, wherein said applying is performed after said 
determining. 

90. (Original) The ISN of claim 89, wherein said internet service node is provided as 
an edge device of an access network such the service policies can be controlled from the edge of 
said access network. 



91 . (Original) The ISN of claim 89, wherein said ISN comprises a plurality of 
processors, said determination means and applying means together comprise: 

assignment means for assigning eacHi of said subscribers to a processor group, wherein 
each processor group is configured with the processing rules corresponding to the assigned 
subscribers; and \ 

forwarding means for forwarding data related to each subscriber to a corresponding 
processor group after said determining of specific subscriber. 

92. (Original) The ISN of claim 91, wherein end systems of said plurality of 
subscribers generate data using internet protocol (IS). 

93. (Original) The ISN of claim 92, wherein said data comprises ATM cells. 

94. (Original) The ISN of claim 93, wherein said assignment means comprises 
examination means for examining data contained in said ATM cells, said determination of 
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specific subscriber being based W the results of said examination and a port on which said ATM 
cells are received, wherein said port is contained in said internet service node. 

95. (Original) The ISN of claim 94, wherein said assignment means further 
comprises modifying means for modifying the header of said cells to indicate said determined 
processor group such that the cells can be forwarded to an appropriate processor group based on 
examination of cell header, wherein|^said appropriate processor group is configured with the 
processing rules related to said specific subscriber. 

96. (Withdrawn) An internet service node (ISN), comprising: 

a switch fabric to receive a plurality of bit groups and to generate a plurality of packets 
from data contained in the plurality of bit groups; and 

a packet service card to receive and process the plurality of packets in accordance with a 
plurality of processing rules, each of the plurality of processing rules including a classifier 
identifying a data flow and an action to apply a policing service policy to packets associated with 
the data flow identified by the classifier, the classifier including a time field to specify a time of 
day during which the policing service poli^ should be applied. 

97. (Withdrawn) The intemet service node of claim 96, wherein the pohcing service 
policy is a prioritization policy to prioritize available bandwidth. 

98. (Withdrawn) The intemet service node of claim 96, wherein the policing service 
policy is an allocation policy to allocate availablAbandwidth. 

99. (Withdrawn) The intemet service node of claim 96, wherein the action included 
in each of the plurality of processing rules further includes a security service policy. 

100. (Original) A method comprising: 
specifying a service policy for a subscriber; 
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translating the service poMcy into processing rules, each of the processing rules including 
a classifier and an action, the claiifier identifying a data flow, and the action implementing a 
policing service policy, the classifier including a time field to specify a time of day during w^hich 
the policing service policy should ^e applied; and 

processing incoming data inWcordance with the processing rules. 

101 . (Original) The meth^of claim 100, wherein translating the service pohcy into 
processing rules comprises specifying a prioritization policy to prioritize available bandwidth as 
part of the policing service policy of eaih of the processing rules. 

102. (Original) The method oAclaim 100, wherein translating the service policy into 
processing rules comprises specifying an allocation policy to allocate available bandwidth as part 
of the policing service policy of each of thd processing rules. 
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